Generated from real user reviews
See Related User Reviews
Verified User
Mid-Market (51-1000 emp.)
4.5/5
"Robust SIEM Solution with Strong Ecosystem Support"
What do you like about Splunk Enterprise Security?
✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr
Ernesto M.
Mid-Market (51-1000 emp.)
5.0/5
"Easy to integrate, understand the workflows and to manage."
What do you like about Splunk Enterprise Security?
Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy t
See Related User Reviews
Naushad T.
Enterprise (> 1000 emp.)
4.5/5
"Splunk ES- Scalable SIEM for Large Enterprise"
What do you like about Splunk Enterprise Security?
The best thing about Splunk is the deep visibility it provides across the environment, along with its strong ability to correlate large volumes of sec
Verified User
Enterprise (> 1000 emp.)
3.0/5
"Splunk user behavior"
What do you like about Splunk Enterprise Security?
It's great because it uses smart technology to spot unusual behavior from users that might signal security issues. It helps find potential threats ea
See Related User Reviews
Muhammad R.
Enterprise (> 1000 emp.)
5.0/5
"Unmatched Visibility and Customization for Security Operations"
What do you like about Splunk Enterprise Security?
What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla
Verified User
Mid-Market (51-1000 emp.)
4.5/5
"Robust SIEM Solution with Strong Ecosystem Support"
What do you like about Splunk Enterprise Security?
✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr
See Related User Reviews
Muhammad R.
Enterprise (> 1000 emp.)
5.0/5
"Unmatched Visibility and Customization for Security Operations"
What do you like about Splunk Enterprise Security?
What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla
RUDRA P.
Enterprise (> 1000 emp.)
5.0/5
"Splunk User Behavior Analytics Review"
What do you like about Splunk Enterprise Security?
Splunk User Behavior Analytics establishes baseline behaviors for users, devices, and applications using unsupervised machine learning algorithms. It
See Related User Reviews
Verified User
Mid-Market (51-1000 emp.)
4.5/5
"Robust SIEM Solution with Strong Ecosystem Support"
What do you dislike about Splunk Enterprise Security?
❌ Learning Curve The flexibility of SPL is a double-edged sword. New analysts often struggle with query writing and alert customization unless they h
Ernesto M.
Mid-Market (51-1000 emp.)
5.0/5
"Easy to integrate, understand the workflows and to manage."
What do you dislike about Splunk Enterprise Security?
Might be very expensinve depend of how much data you are ingesting.
See Related User Reviews
Naushad T.
Enterprise (> 1000 emp.)
4.5/5
"Splunk ES- Scalable SIEM for Large Enterprise"
What do you dislike about Splunk Enterprise Security?
The initial implementation is complicated and requires significant expertise, time, and resources. In our case, we had to extend the contract to a thi
Muhammad R.
Enterprise (> 1000 emp.)
5.0/5
"Unmatched Visibility and Customization for Security Operations"
What do you dislike about Splunk Enterprise Security?
What I dislike about Splunk Enterprise Security is that some of its features can be quite resource intensive. The platform is powerful, but it sometim
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
3.0/5
"Splunk user behavior"
What do you dislike about Splunk Enterprise Security?
it can be complex and require a lot of setup.
Sanket S.
Mid-Market (51-1000 emp.)
5.0/5
"Navigating insider threats using Splunk"
What do you dislike about Splunk Enterprise Security?
Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deplo
See Related User Reviews
Alexandra V.
Mid-Market (51-1000 emp.)
4.5/5
"Splunk Enterprise Security is the master log data collection and threat detection"
What do you dislike about Splunk Enterprise Security?
Advanced security settings not easy especially when new with the system. The support team deseves merit for being helpful and always available when in
Verified User
Enterprise (> 1000 emp.)
3.0/5
"Neutral Experience"
What do you dislike about Splunk Enterprise Security?
Learning Curve is a steep. Take a bit of time to undersant everything
Splunk collects logs from all of the company's systems and applications. Splunk Enterprise Security products provide us with predefined rules and integrate all of products Review collected by and hosted on G2.com.
Price is also big problem for Splunk Enterprise Security. Review collected by and hosted on G2.com.
Searching, Apps for each type of devices, Incident Review and Response, Asset Center are few of the excellent features in Enterprise Security.
All these features are very user friendly and provide the easy incident investigation interface. Review collected by and hosted on G2.com.
Correlation of Packet data and End Point Detection and Response data with event logs are not the feature in Enterprise security. Hence lag the complete security analytics of organization data of each layer. Review collected by and hosted on G2.com.
I like splunk ES because it continuously monitors our system for potential threats and alerts us in real time so that we are able to prevent the threats before they ness up our system. I like its access anomalies dashboard which allows us to identify any breach and suspicious activity from users, this makes it easy for us to prevent any unauthorized and suspicious access and helps us protect our IT infrastructure and keep our sensitive data safe. Review collected by and hosted on G2.com.
I don't like that i can only monitor the privileged accounts for suspicious activity or access breach it would be very helpful if i can monitor all accounts thisbwould hwlp see which account have anomalies and may pose a threat to our system. Review collected by and hosted on G2.com.
very nice visualization and Analytics Engine with easy to create Dashboards, many 3rd party integrations and a vast and active community to support in case spluk support did not answer. Review collected by and hosted on G2.com.
Lack of out-of-the-box features, another Toolbox additional to all other Splunk "tools" rather than an integrated Product. Integration, maintenance and customization effort needed are very high. The subscription fee is exploding, and we need to filter now the ingested logs dramatically ... which adds a new vulnerability. Splunk products have too many product vulnerabilities themself for a Security Product. Review collected by and hosted on G2.com.
It's easy to deploy, the agent /forwarder is very lightweight, and it can parse almost all log sources, which makes it the best in the industry. Review collected by and hosted on G2.com.
Customer service needs improvement and the tool is a bit expensive, apart from that there are no issues with this product. Review collected by and hosted on G2.com.
Great product for security monitoring and reporting. Blazing fast searches, superb user interface and excellent visualization options. Also, reporting and other features are great as well. Review collected by and hosted on G2.com.
Scalability is an issue and licensing costs are very high which makes this great tool hard to procure for SMEs. Also, support can improve to enhance the overall experience. Review collected by and hosted on G2.com.
Enterprise Security has a built-in Risk Analysis Dashboard. This allows an executive-level overview of what is going on in an understandable format which can be viewed by non-technical personnel. It incorporates MITRE, NIST as well as CIS identifiers for threat activity, allowing high-level classification of assets, identity, and communication behavior. Review collected by and hosted on G2.com.
If you are deploying this product for yourself, it is quite a challenge. Enterprise Security offers the single pane of glass for your investigation and monitoring needs, but to get everything onboarded can be daunting. The identity and assets enrichment was not straightforward and required a lot of manual work. For it to be optimized for full benefit, there is a layer of complexity along the journey Review collected by and hosted on G2.com.
All the features were great. From the correlation rules to all the details in the reporting were actually great. Indeed a useful product when it comes to granular security. Review collected by and hosted on G2.com.
Nothing to be disliked of. However it could have been great if they had a handy dashboard template for different enterprises. Review collected by and hosted on G2.com.
Splunk Enterprise Security allows us to actively perform threat intelligence and analysis while providing results in an easy-to-understand manner. Review collected by and hosted on G2.com.
As with Splunk in general proper configuration and deployment requires a steep learning curve. In general, this is my only issue with Splunk, the complexity of configuration and deployment. Review collected by and hosted on G2.com.
Splunk is a great SIEM solution and its integration with almost any network and security device makes it a unique player in market. Its apps and super fast search options are best in class Review collected by and hosted on G2.com.
No problems with splunk so far. Its been working very good Review collected by and hosted on G2.com.
